General
- Target 005428c81842f7431e2d09590d95d4405a41bc6384e98ed9417c732ba8baa87d
- Size 525KB
- Sample260825-1clzzazake
- SHA256 005428c81842f7431e2d09590d95d4405a41bc6384e98ed9417c732ba8baa87d
- MD5 a4c78c743cd21ae46c5d0aa3b72c5679
- SHA1 9ca7f623ed9467d823ae9cc0586b9f11892b0241
- SHA512 c09ef4b33b2b85134a4c94204fc4ccdbd27ba5ffb41744a8dce5a232452e344ab682cf31f1ff1f8d00cc304e06b54a0fa530c7735166a1cc4d2196ad10e784c7
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:tSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T19BB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
005428c81842f7431e2d09590d95d4405a41bc6384e98ed9417c732ba8baa87d.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 005428c81842f7431e2d09590d95d4405a41bc6384e98ed9417c732ba8baa87d
- Size 525KB
- SHA256 005428c81842f7431e2d09590d95d4405a41bc6384e98ed9417c732ba8baa87d
- MD5 a4c78c743cd21ae46c5d0aa3b72c5679
- SHA1 9ca7f623ed9467d823ae9cc0586b9f11892b0241
- SHA512 c09ef4b33b2b85134a4c94204fc4ccdbd27ba5ffb41744a8dce5a232452e344ab682cf31f1ff1f8d00cc304e06b54a0fa530c7735166a1cc4d2196ad10e784c7
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:tSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T19BB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory